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Abstract 

As noticed by R. Kulkarni, the conjugacy classes of subgroups of the modular group correspond 
bijectively to bipartite cuboid graphs. We'll explain how to recover the graph corresponding to a 
subgroup G of PSL2(Z) from the combinatorics of the right action of PSL2(Z) on the right cosets 
G \ PSL2 (Z) . This gives a method of constructing nice fundamental domains (which Kulkarni calls 
"special polygons") for the action of G on the upper half plane. For the classical congruence subgroups 
To(N), Ti(N), T(N) etc. the number of operations the method requires is the index times something 
that grows not faster than a polynomial in log TV. We also give algorithms to locate an element of 
the upper half-plane on the fundamental domain and to write a given element of G as a product of 
independent generators. 

1 Introduction 

The group T — PSL 2 (Z) acts isometrically on the upper half-plane H — {z £ C | Imz > 0} equipped 
with the standard hyperbolic metric. It is well known (see e.g. [3l chapter 2]) that the hyperbolic triangle 
with vertices eT, and oo is a fundamental domain for this action. This implies easily that so is the 
triangle A with vertices e^, i and oo. 

In the sequel G will be an arbitrary subgroup of T. Suppose there is an algorithm that tells whether 
a given g £ T belongs to G. We can construct then a fundamental domain for the action of G out of 
copies of A. A naive procedure is roughly speaking as follows. Start with A. At each step we have a 
connected hyperbolic polygon P made up of copies of A; some of these are "on the boundary", i.e., one 
of their edges is an edge of P. We add a triangle A' which is a neighbour of P, iff the map £ T that 
transforms A' into any boundary triangle is not in G. We stop when we can't add any new triangles. 

This naive procedure has some drawbacks. First, there is no guarantee we end up with a convex 
fundamental domain. Second, while the edge-identifying transformations corresponding to P generate G, 
there is no guarantee that e.g. when G is free we get a free system of generators. Third, the procedure 
is slow: the number of operations it takes is of order (r : G) 2 . 

In [5] R. Kulkarni defines special polygons, which are hyperbolic convex polygons of a particular 
kind, plus some combinatorial information, see p. [5] R. Kulkarni proves that any finite index subgroup 
of T admits a special polygon as a fundamental domain. Moreover, once one has constructed such a 
fundamental domain, one can easily obtain ([5l theorem on p. 1055]) an independent system of generators 
of G, i.e., a subset of G such that G is the free product of the cyclic groups generated by the elements of 
the subset. 

R. Kulkarni does not give an explicit algorithm to construct a special polygon for an arbitrary G C T, 
but it is not too difficult to give such an algorithm, essentially by modifying the naive approach sketched 
above, see S.-P. Chang, M.-L. Lang, C.-H. Lim and S.-P. Tan [2J. In particular, the method of [2] 
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requires the number of operations of order (T : G) 2 . For classical congruence subgroups R. Kulkarni gives 
a somewhat different method involving "trial and error"; this method works faster, assuming enough luck 
with the trial and error part. 

The union of all T-copies of the hyperbolic segment in H connecting e"T and i is a tree. The image 
of this tree in G \ H is a graph, which carries some natural additional structure (e.g., the vertices of the 
graph are naturally decomposed into two types: the images of the copies of i and the images of the copies 
of e^ 1 ). Axiomatising this additional structure R. Kulkarni defines bipartite cuboid graphs, see p. [H 
R. Kulkarni shows [5j theorem 4.2] that the isomorphism classes of bipartite cuboid graphs correspond 
bijectively to the conjugacy classes of finite index subgroups of T. 

So knowing the bipartite cuboid graph corresponding to G (together with some extra data which 
allows one to distinguish G from its conjugates, see theorem[3]) is equivalent to having a nice fundamental 
domain (a special polygon) for G. In this note we show (section[2]) that one can recover the graph with the 
extra data from the combinatorics of the right action of G on the set of right cosets G\T. Our approach 
is inspired by J. -P. Serre's book [BJ. In section [3] we recall how one can deduce an independent set of 
generators for G, together with some other geometrical information on G \ H, from a special polygon for 
G; we also show there how to obtain the above mentioned theorem of R. Kulkarni's ([5] theorem on p. 
1055]) from the results of [BJ. In section 0] we show how one can write a given element of G as a product 
of the independent generators constructed in section [3) we also show there how one can "locate" a given 
xgHon the fundamental domain. 

It turns out that for some G (in particular, for the classical congruence subgroups ro(iV), T°(N), 
ri(JV), r^JV), T{N)) the above results allow one to construct a special polygon much faster than the naive 
method. Namely, the number of operations is the index (and not the square thereof) times something 
which grows not faster than a polynomial in log AT. The algorithm is given in section[5l In l5.ll and l5.2l we 
show how to construct sets of right coset representatives of SL2(Z/A) modulo the images of To(N), Ti(N) 
etc. In l5.3l we give a simple procedure for T(N), and in !5.4l we consider a slightly more general case (which 
includes the other classical congruence subgroups). 

Note that the from the computational viewpoint results of section[5]can only be improved by a factor of 
a polynomial in log N, since the number of edges in a special polygon is twice the number of independent 
generators of G, which is greater than (r : G)/6 by the Riemann-Hurwitz formula (see e.g. [3l theorem 
3.1.1]). _ 

The initial motivation for this work was to find a clear and fast procedure for constructing a special 
polygon for T(N); these polygons are needed to give an explicit description of the mixed Hodge structure 
on the cohomology of the symmetric powers of the Hodge local system on X(N), see [3]. 

Remark. If we take a bipartite cuboid graph, forget the partition of the vertices into the two types 
and replace any two edges meeting at a vertex of valency 2 by a single edge, we will obtain a unitrivalent 
graph with a cyclic orientation at each trivalent vertex. Such graphs occur in the theory of Vassiliev (aka 
finite type) invariants of knots in the 3-space (see e.g. [T)). A natural question is whether this theory is 
related in some way to subgroups T. In particular, are there any natural functions on the set of conjugacy 
classes of finite index subgroups of T satisfying the anti-symmetry and IHX relations? 

Acknowledgements. The author is grateful to H. Verrill and S. Lelievre for interesting discussions 
and to the Max Planck Institute for Mathematics in Bonn for excellent working conditions and stimulating 
atmosphere. 

2 Graphs and fundamental domains 

We will write [" j] to denote the image of the matrix ( ™ k) £ SL.2(Z) in T. 
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Consider the set G \ T, on which L acts on the right. Set Go and G\ to be the subgroups of T 
respectively of order 2 and 3 generated respectively by [ \ ~^ ] and [ \ {]. 

Let X comb (G) be the graph constructed as follows. The set Vert(X comb (G)) of vertices of X comb (G) 
is the disjoint union of the sets of all Go- and Gi-orbits in G \ T, i.e. 

Vert(X comb (G)) = (G \ T/G ) U (G \ T/Gi). 

The set Edge(X comb (G)) of edges of X comb (G) is G \ T. An element x G Edge(X comb (G)) = G\T joins 
the vertices A and B, A, B C G \ F iff x G A n B. Note also that the vertices ofn X comb (G) can have 
valency 1, 2 or 3. 

There is another way of looking at the graph -X" comb (G). Namely, set T = X comb ({Id}), i.e. T is an 
infinite tree with Edge(T) = T, 

Vert(T) = (r/G ) U (T/Gi) 

and g G T joins goGo and <?iGi iff g G goGo PI giG\. The group T acts on T on the left and we have an 
isomorphism G \ T = X com b(G). 

The advantage of the first construction of X com b(G) given above is that when (r : G) < oo it starts 
with a finite set G \ F, rather than with an infinite tree T. 

Set T to be the union of all r-copies of the hyperbolic segment r in H that joins i and e^. It is 
not difficult to show that T is a treqj. Since both T\T and T \ T are segments, it follows from [SJ 1.4, 
theorem 7] (or can be easily checked by hand) that we have a T-equivariant isomorphism / : T — > T. 
Such an isomorphism is unique if we require that the vertex of ^ comb (G) that corresponds to Go as a left 
Go-coset is taken to i and the vertex that corresponds to Gi as a left Gi-coset is taken to e^". 

Recall that we have set A to be the hyperbolic triangle with vertices 0, e^ , oo minus the vertices 
and oo. Let p : A — > r be a continuous retraction that takes the imaginary half- axis to i and both 
the geodesic half-intervals that join e^ with and oo to e^r. Extend p to a T-equivariant retraction 
p : H — » T. The mapping p can be joined with Idn by a T-equivariant homotopy leaving T pointwise 
fixed. From the above we obtain the following 

Theorem 1 1. The graph A" C omb(G) is a combinatorial model for the Riemann surface X(G) = G\H, 
i.e. ^comb(G) is homotopy equivalent to X(G). 

2. Cut AT comb (G) in some of the vertices of valency 2 to obtain a tree X' and take a lift j of this tree 
into T so that the diagramme 




Acomb(G) — G \ T 

commutes. The set P = p^ 1 {f{X')) is a convex hyperbolic polygon which is a union ofT-copies of 
A and a fundamental domain for the action of G on H. 

1 Here and in the sequel we slightly abuse the terminology and don't make explicit distinction between a graph and its 
geometric realisation; this should never lead to a confusion. 
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Let us describe P more explicitly. First, notice that the vertices of X com b(G) can be of one of the 
two types. We will say that the vertices of X com b(G) which are elements of G \ T/Gq are of type (0) and 
those which are elements of G \ T/Gi are of type (1). The vertices of type (0) can be of valency 2 or 1 
and the vertices of type (1) can be of valency 3 or 1. The edges of X com b(G) which meet in a vertex of 
valency 3 (and type (1)) are cyclically ordered: they correspond to the elements of a 3-element Gi-orbit 
A; take any element x G A and the cyclic order will be x, x ■ [ _? x \ ] , x ■ [ _?j \ ] 2 . 

Second, notice that the vertices of T also are naturally decomposed into two types: we'll say that a 
vertex of T is of type (0), respectively (1), if it is a T-copy of i, respectively e"^ . We also have a cyclic 
ordering on the set of the edges of T which meet at a trivalent vertex: the ordering comes from the 
orientation of of the plane. 

Third, the graph X com b(G) has a "distinguished" edge yq which is G G G \ T (i.e. G as a right 
G-coset). The edge yq joins two "distinguished" vertices, which are the Go- and Gi-orbits of G G G\T; 
denote these vertices respectively by V ° and Vf . Let r' be the preimage of yq in X', and let V ' and V{ 
be the extremities of r' that map to respectively V and V{ . 

Now take the unique embedding i : X 1 — » T that takes V ' to i, V{ to e^r and preserves the types of 
the vertices and the cyclic orientation at each trivalent vertex. Each edge r of T which is in the image of 
i can be written as r = g r ■ r for a unique g r G T. 

Proposition 1 The polygon P of theorem]]] is the union of g r ■ A for all edges r of T which are in the 
image of i. 

3 Independent sets of generators 

Recall that a subset {gi, . . . ,gi} of a group H is called an independent set of generators if H is the 
free product of the cyclic subgroups generated by the <?i's. Now we briefly describe how to obtain an 
independent set of generators for G G T from the above information. We start by defining an involution 
a on the set of edges of P. 

Take a lift j of X' into T such that ([1]) is commutative, Vq is taken to Go as a left Go-coset and V{ 
is taken to G\ as a left Gi-coset. Note that j(X') is a fundamental domain for the action of G on T. In 
the sequel we identify X' with j(X'). 

The edges of P correspond to the univalent vertices of X'. More precisely: 

• To each univalent vertex of X' of type (0) there is an edge; this edge makes an internal angle with 
any adjacent edge. Moreover, the univalent vertex can be obtained either from cutting a bivalent 
vertex of X com i,(G) or from a univalent vertex of X com b(G). 

• To each univalent vertex of type (1) there are two edges making an internal angle ^p. 

Suppose an edge s of P corresponds to a univalent vertex V of X' obtained from cutting a bivalent 
vertex W of X com b(G) of type (0), and let s be the edge of P corresponding to the other vertex V of 
X 1 obtained from cutting V. Then set a(s) = s, a(s) = s. Both s and s are T-copies of the imaginary 
half-axis. Equip s and s with the orientation induced from P; there is a unique g s G T that takes s to s 
in an orientation-reversing way. Moreover, g s takes V to V (recall that we have identified X' with j(X')) 
and X' fl g s (X') = {V}; this implies that g s G G (since X' is a fundamental domain for the action of G 
on T). 
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Suppose an edge s of P corresponds to a univalent vertex V of X' obtained from a univalent vertex of 
^comb(G) of type (0). Also in this case s is the image of the imaginary half-axis under some g € T; set s' 
and s" to be the images under g of the geodesic half-intervals in H that join i respectively with and oo. 
We consider s as the union of two edges s' and s" making an internal angle tt and set cr(s') — s", cr(s") = s. 
There is a unique element g' s T that swaps s' with s". Note that g' 2 = Id; set g s / = g s " = g'. Moreover, 
g' -V = V and X' n g' ■ X' = {V}, which implies that g> £ G. 

Finally, suppose we have two edges s' and s" of P which correspond to a univalent vertex V of X' 
obtained from a univalent vertex of X com h(G) of type (1). Then there is a unique jgT such that s' and 
s" are the images under g of the geodesic half-intervals in H that join e^ 1 respectively with and oo. 
Set cr(s') = s",er(s") = s. There is a unique g' € T that takes s' to s"; set g s > = g',g S " — 9 — g a ■ As 
above we have g s >,g s >> G G. 

Recall now that a special polygon 2.4] is a convex hyperbolic polygon Pel plus an involution a 
on the set of the edges of P which satisfy the following. 

1. Any edge of P is a T-copy of the geodesic that joins oo with either 0, i or e^ 1 . 

2. Any edge which is a T-copy of the geodesic joining and oo is paired under cr with another such 
edge. 

3. Any edge s which is a F-copy of the geodesic segment joining i and oo is adjacent to another such 
segment s', and <r(s) = s' 1 a(s / ) — s. The angle between s and s' is w. 

4. Any edge s which is a T-copy of the geodesic segment joining e^" and oo is adjacent to another 
such segment s', and er(s) = s' , cr(s') = s. The internal angle between s and s' is 

Theorem 2 1. The couple (P, cr) is a special polygon. 

2. Let S be a subset of the set of the edges of P which intersects every a-orbit exactly once. Then 
{g s | s £ S} is an independent set of generators of G. 

The first assertion follows from the above constructions. The second one follows from |5, theorem on 
p. 1055] or [6, 1.5, theorem 13]. ♦ 

A graph X such that 

• the vertices of X are decomposed into two types; 

• the vertices of one type can have valency 1 or 2; 

• the vertices of the other type can have valency 1 or 3; 

• any edge of X joins a vertex of one type with a vertex of the other type; 

• there is a cyclic order on the set of the edges meeting at a vertex of valency 3 

is called a bipartite cuboid graph. R. Kulkarni noticed [5, theorem 4.2] that the isomorphism classes of 
bipartite cuboid graphs correspond bijectively to the conjugacy classes of finite index subgroups of T. 
The mapping that associates a graph to a conjugacy class of subgroups is constructed in [5] as follows: 
we take a conjugacy class C to the isomorphism class of the image of T in G \ H where G £ C is a 
representative. It follows that A com b(G) is a representative in the isomorphism class of bipartite cuboid 
graphs that corresponds to the conjugacy class of G. 

A pointed bipartite cuboid graph is the data of a bipartite cuboid graph and an edge of the graph. 
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Theorem 3 The map G t— > (X com b(G), r^) induces a bijection between the set of subgroups ofT and the 
set of isomorphism classes of pointed bipartite cuboid graphs. In particular, the quotient o/Edge(X com b(G)) 
by the group AutX com b(G) of the automorphisms of X com \ J {G) that preserve the bipartite cuboid struc- 
ture is in bijection with the conjugacy class of G; so G is normal iff AutX com b(G) acts transitively on 
Edge(A comb (G)). 

* 

Remark. The elliptic points can be located on the fundamental domain P as follows: the elliptic 
points of order 2 are the points of the form i(V) where V is a univalent vertex of X' of type (0) that 
comes from a vertex of A com b(G) of type (0); the elliptic points of order 3 are those that have the form 
i(V), V a univalent vertex of X' of type (1). 



4 Reduction procedure 

Here we recall how one can use the pair (P, a) from the previous section to construct, given a point zeH, 
a point w G P and an element g <E G such that gw — z. We also give an algorithm which enables one to 
write a given g G G as a product of g s ,s G S. 

Take a point z £ P. Let 7 be the geodesic line through z and an interior point z of P; the oriented 
geodesic segment connecting z and z gives a (maybe self-intersecting) oriented geodesic segment on G\M. 
Let us construct the corresponding sequences of oriented segments in P and elements of G. I.e., we will 
construct a sequence of oriented geodesic segments 70, . . . , "fi C P and a sequence g , . . . ,gi of elements 
of G such that 

• The extremities of any ji except 70 are on the boundary of P, and the interior of any 7$, except 
maybe the last segment, 7;, is in the interior of P. 

• For any i — 0, ... ,1 we have giji C 7. 

• go is the identity element and 70 G 7 n P connects zq and a point on the boundary of P and is 
oriented towards z. 

• If < i < j < I, then g^fi n gj-fj is a point if j = i + 1 and empty otherwise. 

• The segment giji contains z, and if i = 1, . . . , I — 1, then g^i lies between z and z on 7. 

Suppose that go,---,9i and 70, ...,7» have already been constructed. If z G <?i7i, then we stop, 
otherwise let us construct gi + \ and Ji+i- Let z' be the endpoint of 7j. 

Suppose first that z' is not a vertex of P. Let 7 be the geodesic line containing 7$, and let 5' be the 
side-pairing transformation that takes the edge s of P that contains 7$ to cr(s). It is easy to see that the 
geodesic (77 intersects the interior of P. We set gi + i = gig' -1 and 7 i+ i = g'j n P oriented so that <?V is 
the starting point. 

The case when z' is a vertex corresponding to an elliptic point of order 2 is similar: we set gi + \ — gtg 1-1 
where g' is the element of order 2 that takes one of the edges meeting at z' to the other one; the segment 
7i_l_i is equal to 7, with the orientation reversed. 

Suppose now that z' is a vertex corresponding to an elliptic point of order 3. Let s±, S2 be the edges 
of P meeting at z'. The angle a between 7^ and one of these edges, say s\, is < |. Set g i+ i — gig' -1 
where g' is the element of order 3 that takes s± to S2- If a < f, then we set 7^+1 = 7 n P where 7 is 
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the geodesic through z' that forms an angle ^ — a with s 2 ; 7»+i is a geodesic segment whose integior lies 
within the interior of P. If however, a = ^, then gi+is 2 C 7 is a geodesic ray whose starting point, z' , 
lies between z and z on 7 (since 7$ does). So z e ,9i+is 2 and we set -f i+ i to be the segment connecting 
z' and g^(z). 

Once the sequences 70, . . . , "fi CP and g , . . . ,gi have been constructed we set g = gf 1 and w = gz. 
To write a given g G G as a product of g s 's, we pick a point z in the interior of P and apply the 
above procedure to z — gz . 

5 Algorithms for classical congruence subgroups 

The results of the prevous sections allow one to construct the bipartite cuboid graph corresponding to a 
subgroup G C T (and hence, a fundamental domain for the action of G on H). In general the number 
of operations this procedure takes is roughly (r : G) 2 . However, if G is a level N congruence subgroup, 
there is an easier way to construct the bipartite cuboid graph, assuming one can find a quick way to write 
down a set of right coset representatives of SL 2 (Z/N) ± id modulo the image of G in SL 2 (Z/N) ± id. 

For any G C T set nG to be the image of G in SL 2 (Z/N)/ ±id. Construct a graph ArX com b(G) exactly 
in the same way as ^f CO mb(G) in the previous section, but replace T, G, Go and Gi by aT, atG, nGo and 
nGi respectively. If G is a level N congruence subgroup, the graphs X com b(G) and jv^comb(G) will 
be naturally isomorphic, and the isomorphism will respect all the additional structure (partition of the 
vertices into two types, cyclic order at the trivalent vertices, the distinguished edges). So for our purposes 
it would suffice to work with elements of aT. 

In this section we illustrate this simplified algorithm in the case when G is one of the classical 
gongrucnce subgroups T (N), T°(N), T^N), ^(N), T(N). 

Set X = (Z/N) 2 / ± id. There is a natural injective mapping jyT — ► X 2 which takes A E aT to the 
couple formed by the images in X of the first and the second columns of a lift of A to SL 2 (Z/7V). So it 
is convenient to store the elements of nT as couples (x, y) with x, y E X. 

Conventions. In this section 0(P log N) stands for "a sequence which grows not faster than a 
polynomial in log N" . 

Suppose a group H acts on a set X, and let X' be a subset of X which intersects each orbit exactly 
once. Elements of X' will be called orbit representatives. An algorithm that constructs, given x E X, the 
element x' E X' that belongs to the same ff-orbit as x will be called a reduction procedure. 

5.1 Lists of representatives for T (N) and r°(iV) 

Recall the definition of the projective line P 1 (Z/N) over Z/N. Set atY to be the set of couples (a, b) E 
(Z/N) 2 such that a and b are coprime modulo N, i.e., for some (hence, for any) lifts a and b of a and b 
to Z we have gcd(a,6,iV) = 1. The group (Z/N)* acts on N Y and we set P^Z/TV) = N Y/(Z/N)*. We 
denote the image of (a, b) E N Y in ¥ 1 (Z/N) by (a : b). 

If a, I are integers, I > 1, we denote the image of a in Z/l by [a];. 

The quotients N To(N) \ N T and N T°(N) \ N T are both isomorphic to P 1 (Z/N). Indeed, N T acts 
transitively on the right on P 1 (C) by the rule 

(a' :*>')• [id] = {a'a + b'c:a'b + b'd). 

The stabiliser of (0 : 1) is N T (N) and the stabiliser of (1 : 0) is N T°(N). So the isomorphism N r (N) \ 
aT — > P 1 (Z/N) associates to an element A E n^o(N) \ the image in ¥ X (Z/N) of the second row of 
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a matrix A' obtained by lifting A first to atT and then to SI^Z/AT). The isomorphism ^T°(N) \ nT — -> 
P 1 (Z/iV) is constructed in the same way, except that we take the first and not the second row of the 
"lifting" matrix. 

We have the commutative diagramme 

SL 2 (Z/7V) ► N T (N)\ N T 




N Y > P\Z/N) 

where the left vertical arrow takes a matrix to its last row. 

So to write list of representatives for To(N) and T°(N) it suffices to give a representative (a, b) E 
(Z/N) 2 for any (a' : b') E P 1 (Z/N). Note that given a row ([aj^v, [&]a0 G «Y one can complete it to 

a matrix ( e SL^Z/A 7 ") in O(logAZ') operations (use the Euclidean division algorithm to find 
integers x, y such that xa + yb = 1 mod JV). 

Write iV = p™ 1 -P™* 1 with primes and rrii > 0. By the Chinese remainder theorem there is an 
isomorphism J\V 1 (Z/p' m ) -> P^Z/JV) which takes 

((M P ™i : [blip""! ),-.., ([afe]p™fc : M P m <= )) ( 2 ) 

to Qn a i]iv : [II^IaO- The inverse isomorphism takes ([a] a? : [&]iv) to 

({[a] pmi : [b] pmi ),...,([a] p m k : [6] p m fc )). (3) 

So it would suffice to consider the case when N is a power of a prime, N — p m . 
Since AT = p m , in each (Z/AT)*-orbit in atY there is an element (a, 6) with 

ae {[OWJiWJpW,...,^" 1 - 1 ^}- 

For an a e Z/N we denote the stabiliser C (Z/N)* of o by Stab (a). 

Proposition 2 VKe ftaue Stab([0]j\r) = (Z/N)*, StabQl]^) = {[1]jv}- The stabiliser of [p l ] N A < i < 
m — 1 is the kernel of the group morphism f : (Z/N)* — ► (Z/p m ~*)* induced by the ring morphism 
Z/N -> Z/p m -\ 

If a G (Z/AO* is in the kernel of /, then a = b ■ [p^^w + 1 for some b G Z/W, so a • [p*^ = \p%. 

Conversely, take an a E Stab(p l ). Let a be a representative of a, I < a < N — 1. Use the Euclidean 
division to write a = xp> + y with x, y E Z such that < y < p — 1 and either x = or x is coprimc to p 
and j > 0. If x = 0, then y = 1 (otherwise a wouldn't stabilise [p 1 ]n] and a = [1]jv G ker/. 

Suppose a; is coprime to p and 1 < j < m — i. Since a stabilises [p j ]at, we have ap 1 = xp l+J + yp l = 
p l + lp m , I E Z, which means that yp % —p l belongs to p I+J Z. Moreover, yp % — p l ^0, since x is coprime to 
p. But \p l — y-p l \ can take values 0,p l , ■ ■ ■ ,p l (p — 2), so yp l —p l can not be a non-zero element of p l+: >Z. 

Suppose x is coprime to p and j >m — i. Then ap 1 = yp % mod N, which implies y = 1, and we have 
a = b- [p m -% + 1 G ker/. * 

So {[o\n I 1 < a < p m ~\gcd(a,p) = 1} is a set of representatives of (Z/N)* modulo the stabiliser of 
p', 1 < i < m — 1. 

Proposition 3 ,4 set o/ or&zi representatives for the action of Z/N, N — p m on nY can be chosen as 
the set of all (a, b) such that one of the following holds 
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• a = [Q] N ,b= [1]n, 



• a=[l] N ,be (Z/N)*, 

• a = p\l < i < m - I, b = [b\ N ,1 <b < p m ~\gcd(6,p) = 1. 

Given (a,b) G atY, the reduction procedure goes as follows. Lift a and b to integers a, 6, < a, 6 < 
N — 1. If p m divides a, then the orbit representative is ([0]jv, [1]jv)- Otherwise write a = c - gcd(a,iV). // 
gcd(a, N) = 1, then the orbit representative of (a,b) is ([1]jv, ^[c]^- 1 ). I/gcd(a, N) =p l ,l < i < m — 1, 
then the orbit representative of(a,b) is ([p 1 ]n, [&']iv) where b 1 is the reduction ofblc]^ 1 modulo p m ~ l . The 
reduction procedure takes O(PlogN) operations. 

Using isomorphisms HP and (0] one obtains a set of orbit representatives and a reduction procedure 
for the action of (Z/N)* on nY for arbitrary N . The reduction procedure takes O(PlogN) operations. 

* 

Now we consider the left action of AfTo(-ZV) on a<T. 

Proposition 4 For any orbit representative (a,b) for the action of (Z/N)* on pjY from the previous 
proposition construct a matrix A( a b ^ — (^f) G SL2(Z/7V). The set formed by the images of all such 
matrices in nT will be the set of orbit representatives for the action of nTq(N) on nT. 

The reduction procedure is as follows: take an element A G jyT, lift it to a matrix A' G SL2(Z) and 
apply the reduction procedure from the previous proposition to the transpose of the first column of A' to 
obtain a couple (a,b); the matrix Au^ will be the orbit representative of A. The reduction procedure 
takes 0(P log N) operations. 

Note that the element of nTq(N) that takes A( a b ^ to A is A - Aj^ b y 

The case ofT°(N) is similar, except given a representative (a, b) G jv^, we have to construct a matrix 

eSL 2 (Z/N), and not ( c a i). 
The number of operations which necessary to write down all orbit representatives is (atT : jvro(-/V)) = 
( N T : AriyiV)) times 0(P\ogN). 

5.2 Lists of representatives for Tx(N), r x (N) and T(N) 

Suppose a group H acts on a set X on the left and let {x{\ be a set of orbit representatives for this 
action. Suppose {hj} be a set of orbit (=right coset) representatives for the left action of a subgroup 
H 1 C H on H . Then {hjXi} is a set of orbit representatives for the action of H' on X. Suppose we have 
reduction procedures for the action of H on X and for the left action of H' on H and moreover, suppose 
that, given x G X we can not only construct an xi that belongs to the same iJ'-orbit as x, but also an 
element h G H such that hxi — x. 

Then we can construct a reduction procedure for the action of H' on X as follows. Take aniel, 
reduce it modulo H to Xi and find an h in H such that hxi — x. Apply the reduction procedure to h to 
obtain h — h'hj with h' G H' ', i.e. x = h'hjXi. Note that we obtain not only an orbit representative hjXi 
of x, but also an element hi that takes the orbit representative to x. 

The set of all [q - 1 ] such that a = [a], gcd(a, TV) = 1, 1 < a < [y] is a set of (both left and right) coset 
representatives of both nT (N) modulo Arr^iV") and Arr°(iV) modulo nT 1 (N). The reduction procedure 
both for the action of jyTi(N) on aTo^) and for the action of nT 1 (N) on Arr°(iV) consists in setting 
the non-diagonal element equal to zero. The above observation gives us lists of orbit representatives and 
reduction procedures for the left actions of a»Ti(7V) and A/T^iV") on aT. 
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As above, the number of operations necessary to write the sets of coset representative is (aT : 
nTi(N)) — (aT : nTi(N)) times 0(P log N) and the reduction procedures take 0(P log N) operations. 

In a similar way, passing from aTi(-ZV) to nT(N) (the identity subgroup) we can list the elements of 
a/T in (#nT)0(P log N) operations. We don't need a reduction procedure for atT, since each element is 
a coset representative modulo the identity subgroup. 

5.3 Algorithm for T(N) 

Here we give an algorithm of constructing the graph X com b(T(N)), N > 3. Let us first note that the 
graph AT com b(r(7V)) has no univalent vertices (since T(N) has no elliptic points when N > 3) and that 
the distinguished edge does not matter, since F(N) is a normal subgroup of T. So the graph X comh (T(N)) 
consists of a certain number of vertices of type 1 connected by a certain number of segments, each of 
which is the union of two edges; the extremities of each segment are of type 1 and the "middle" is of 
type 0; three segments meet at any vertex of type 1 and the segments meeting at each such vertex are 
are cyclically ordered. 

First, we use the list of the elements of a»T = SL2(Z)/{±id} = T(N) \ T from the previous subsection 
to give a list L of all triples (xo,xi,X2) £ X 3 where xq and x\ are the first and the second columns of 
an element of aT, and X2 is obtained as follows: lift xq, respectively x\, to x' £ (Z/iV) 2 , respectively 
x[ e (Z/N) 2 , and set X2 to be the image of x' + x[ in X. The resulting list is in a 1-to-l correspondence 
with aT. 

Now we look at the right action of nGq and jyGi on aT in terms of the above list. The group nG\ 
acts by cyclically permuting the elements of each triple (xq, X\, x^)- The generator of nGq swaps Xq and 
xi and replaces x-i by the image of x' Q — x[ in X where, as above, x' and x^ are lifts of respectively Xq 
and x 1 to (Z/N) 2 . 

Let us assume that the elements of X are totally ordered, here is the construction of X com b(r(iV)). 

1. Construct the set L' of representatives for the action of nG\ on L as follows: take an element 
T = (xq, x\, X2) S L; if xo < x\ and xq < X2, then keep T, otherwise discard it. This will be the set of 
trivalent vertices of type 1 of X com b(T(N)). 

2. For each triple T = (xq,Xi,X2) G L' let Ai(T),i = 0,1,2 be the triple (yo, 3/1,2/2) such that 
Hi = Xi + i, yi+i = Xi and yi+2 is the image of x' — x\ in X for some lifts x' and x[ of xq and X\ to X. Let 
E>i(T) be the triple from L' obtained from Ai(T) by cyclically shifting the smallest coordinate to the left. 

3. Connect each T £ L' with the triples Bi(T),i = 0,1,2 by an edge; divide each of the resulting 
edges into two edges by a vertex of type 0. Notice that the three edges meeting at each T are cyclically 
(and even totally) ordered, since the set {Bi(T) \ i = 0, 1, 2} is totally ordered. 

5.4 Algorithm in the general case 

In this subsection G is a level N congruence subgroup; we assume that we have a a list L of right 
coset representatives of aT modulo G and a fast reduction procedure which allows one to find the coset 
representative of any given element of aT. In particular, G may be any of the classical congruence 
subgroups r (7V)T°(7V),r 1 (iV),r 1 (iV), see O and O The set L will be the set of edges of X comh {G). 

The algorithm is based on the obvious observation: whenever a group acts on a totally ordered set, 
one can easily construct the quotient - just take the smallest element in each orbit. 

The group nGo and the group nGi both act on the right on L. The action is as follows: take a matrix 
from L, multiply it on the right respectively by 0] or }] and apply the reduction procedure to 
get a another matrix from L. 
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We can totally order nT: say, take an order on X, order X 2 lexicographically and order atT using the 
injection jyT C X 2 , see p. [7] 

1. Now let V{,i = 0, 1 be the set of the smallest elements of the jvGi-orbits of the elements of L. 
(We can write these down as follows: go through the list L; if an element is the smallest one in its, say, 
ArGo-orbit, then keep it, otherwise discard it.) 

2. Set V to be the disjoint union of Vo and V\. This will be the set of vertices respectively of type 
and type 1 of X comh (G). 

3. Given a vertex A in Vi, here is how we can find the vertices in Vo it is connected with and the 
corresponding edges: A is the smallest element of its ArGi-orbit X C L, which contains 1 or 3 elements. 
Suppose X = {A,B,C}. Let A\, B\ and C\ be the smallest elements of the ArGo-orbits of A, B and G 
respectively. Then we connect A £ V\ with A\,B\,C\ £ Vq by the edges respectively A, B, C £ L. Note 
that A, B and G are in the same ArGi-orbit, so they are cyclically ordered (this order is not related to 
the order on aiT). Note also that it may happen that Ai,B\ and C\ are not all distinct, e.g. A\ — B\\ 
this means that A is connected by two different edges with the vertex £ Vq corresponding to A\ = B\. 

If X contains just A, then A corresponds to an elliptic point of order 3 of G. We connect A £ Vi with 
the smallest element A\ £ Vo in the ArGo-orbit of A. 

In a similar way, given an element in Vq, we find the vertices in V\ it is connected with and the 
corresponding edges. Namely suppose A is the smallest element of its ArGo-orbit IcL, which this time 
contains 1 or 2 element (s). For each of these we find the smallest element in the orbit and connect 
A with the resulting element(s) of V\. Note that if the orbit X contains just A, then A corresponds to 
an elliptic point of order 2. Note also that it may happen that X contains two elements which are in the 
same ArGi-orbit; this means that A is connected by two edges with the corresponding vertex £ V\. 

4. Given an element A £ E, one can construct the vertices it connects as follows: just take the 
smallest elements in the a^Go- and ArGi-orbits of A. 

5. Here is how one can store the above data in memory. We don't have to store the edges of X com b(G) 
other than the distinguished edge, see step 6. All we have to keep track of is which vertex is connected 
with which, i.e. we should make a list of entries, one for each vertex, that would tell us where to go when 
we map ^ omb (G) to H. Suppose for instance we have a vertex A which is connected by at most one edge 
with any other vertex. Then all we have to write down is the set of these other vertices A is connected 
with and eventually, if A is trivalent, the cyclic order. I.e., the entry for such a vertex will be {B,C} or 
{B} if A £ Vo and (B, G, D) or {B} if A £ V\ (here and in the sequel round brackets stand for the cyclic 
order). If we have a trivalent vertex A that is connected by two edges with some bivalent vertex B, this 
should be reflected in the entries for both these vertices. E.g. the entry for A could be {B, B, G) (no pun 
intended) where G is the remaining vertex A is connected with; the entry for B could be something like 
{A}, double. 

6. However, there is a small point which is still missing: we have to specify the distinguished edge 
on our graph (the one that will be mapped to the hyperbolic segment connecting i and e~ when we 
develop the tree obtained by cutting the graph on the plane). The distinguished edge corresponds to a 
representative (in L) of the identity matrix. Using step 4 we can find the vertices A £ Vi and B £ Vq it 
connects. Let us store these vertices. 

If the distinguished edge is the only one connecting A and B, then this is all we have to do to specify 
the distinguished edge. Suppose however, there are two edges connecting A and B. Then A has valency 
3, and we have to store an extra piece of data which tells whether the non-distinguished edge connecting 
A with B comes after or before the distinguished one in the cyclic ordering of the edges meeting at A. 
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